CVE-2021-43628: SQL Injection
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43628?
The severity of CVE-2021-43628 is critical with a CVSS score of 9.8.
How does CVE-2021-43628 affect Projectworlds Hospital Management System?
CVE-2021-43628 affects Projectworlds Hospital Management System v1.0 and allows SQL injection via the email parameter in hms-staff.php.
How can I fix CVE-2021-43628?
To fix CVE-2021-43628, you should update Projectworlds Hospital Management System v1.0 to a patched version that addresses the SQL injection vulnerability.
What is SQL injection?
SQL injection is a type of vulnerability where an attacker can inject malicious SQL queries into an application's database.
What is the CWE ID for CVE-2021-43628?
The CWE ID for CVE-2021-43628 is 89, which corresponds to the vulnerability type 'Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection').'